Add bitlocker fix to lanzaboote

2025-05-05 17:25:26 +02:00 · 2025-05-05 17:25:26 +02:00 · e4d521e10f
commit e4d521e10f
parent 62ab685cd4
1 changed files with 1 additions and 0 deletions
--- a/base/common_hardware.nix
+++ b/base/common_hardware.nix
@ -22,6 +22,7 @@ in {
    lanzaboote = lib.mkIf config.conf.secureBoot {
      enable = true;
      pkiBundle = "/var/lib/sbctl";
+      settings.reboot-for-bitlocker = true;
    };

    loader = {